Live › vulnerability › CVE-2026-114175
Go to dashboardThe eRoom Zoom Meetings & Webinar plugin by DigitalME has a missing authorization check, so requests can bypass intended access control levels. An attacker may be able to reach meeting or webinar functions their role should not allow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the eRoom Zoom Meetings & Webinar plugin version 1.7.1 or earlier are in scope, and the sources say the flaw is an incorrectly configured access control level. Sites that do not have the plugin installed can skip this. The sources do not say which default configuration is exposed.
No product ranges from the sources yet.
1.7.1; versions through 1.7.1 are reported as affected1.7.1 once the vendor publishes itEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-114175")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.